Take Linux Routing to the Next Level with iproute2

Routing with Linux: You may like your trusty old routing utilities, but stepping up to iproute2 may make your life easier. Here's how.

 By Carla Schroder
Page 1 of 2
Print Article

If you're an oldtyme network admin clinging possessively to your old Linux routing utilities in the net-tools package — ifconfig, route, arp, netstat, nameif, and so forth — it is perfectly OK if you continue to do so. They get the job done. However, they have some limitations that may matter to you.

With net-tools all packets are treated the same, and all routing is based only on the destination. This is OK if all you need are the simplest static routes. But if you want to be able to configure more complex scenarios simply and efficiently, or set up tunnels easily, or set different priorities depending on the type of data, or assign multiple IPs to an interface without using aliasing, you want iproute2.

Today we'll look at kernel requirements and useful iproute2 querying and status commands. Next week we'll configure both static and dynamic routes.

iproute2 is included in most distributions these days and replaces net-tools and any other motley old routing utilities you may have hanging around. The ipcommand does just about everything you need, so you don't need to collect and learn a lot of different utilities. The old gang in the net-tools package have been officially deprecated for quite a few years, but you know how these things hang on. You may also install iproute2 from sources or packages — both Debian and Red Hat packages are named iproute, not iproute2.

iproute2 On A Workstation
To use iproute2 on a non-router host — for example, for using the querying and interface-configuring commands on a workstation — requires only iproute2; you don't need to mess with kernel options. Use the ipcommand to see your interface status:

$ ip address show
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
     inet scope host lo
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
     link/ether 00:03:6d:00:83:cf brd ff:ff:ff:ff:ff:ff
     inet brd scope global eth0

As you can see, ipuses CIDR notation instead of moldy old dotted quads. This is what the output from an IPCop router/firewall looks like:

2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
     link/ether 00:60:97:99:3f:21 brd ff:ff:ff:ff:ff:ff
     inet brd scope global eth0
3: eth1: <BROADCAST,NOTRAILERS,UP> mtu 1500 qdisc pfifo_fast qlen 1000
     link/ether 00:50:ba:54:91:6d brd ff:ff:ff:ff:ff:ff
     inet brd scope global eth1

(If you're wondering what "qdisc pfifo_fast qlen" mean, see Chapter 9 of the Linux Advanced Routing & Traffic Control HOWTO.) You can see that eth0 is the "inward" facing NIC, because it has a non-routable private IP and broadcast address. eth1 is the "outward" facing NIC with a public routable IP.

Adding And Removing IPs
ip will assign new addresses directly to a NIC, rather than aliasing the way ifconfigdoes. This means that instead of treating each aliased address as a separate interface, the kernel sees it as a single interface. So it uses less memory, less table space, and less CPU time, which all add up in a hurry on large-scale systems. Adding a new address is easy:

# ip address add dev eth0

As is removing one:

# ip address delete dev eth0

Display Routing Tables
You can view your existing routing table:

$ ip route show dev eth0 proto kernel scope link src
default via dev eth0

"proto kernel" means the routing protocol is in the Linux kernel. If there are routes from a different router like Zebra it would mark the routes added by Zebra with "proto zebra." "scope link" tells us this is a unicast or broadcast route. Other values are "scope host" for local, and "scope global" marks gatewayed unicast routes. "default via dev eth0" tells us the default route and the device it is attached to.

You can add some options to prune the output from complex routing tables. For example, you can find all the Zebra-added routes:

$ ip route show proto zebra

Or see what a particular interface is doing:

$ ip route show dev eth1

You can find out which route and IP are used to reach a particular IP, whicn is handy for troubleshooting:

$ ip route get via dev eth0 src
cache mtu 1500 advmss 1460 hoplimit 64

Continued on page 2: Display ARP Table

This article was originally published on Jun 8, 2005
Get the Latest Scoop with Networking Update Newsletter